earlyxdm does not depend on hal therefore it can happen that kdm logs in a user
before hald is fully started. This means that hal-resmgr cannot contact hald
upon login which in turn means no ACLs can be set for devices that were already
processed by the currently starting up hald at that point in time.
This can be seen with alsa devices where only some of them have ACLs.